Email
Access mail@ucsf
VPN
HelpAdobe Flash Vulnerability - Currently Being Exploited
Adobe has released Security advisory APSA09-03, which describes a vulnerability affecting Adobe Flash. Other Adobe applications that include the Flash runtime, such as Adobe Reader 9, are also affected.
An attacker could exploit this vulnerability by convincing a user to visit a website that hosts a specially crafted SWF file. The Adobe Flash browser plugin is available for multiple web browsers and operating systems, any of which could be affected. An attacker could also create a PDF document that has an embedded SWF file to exploit the vulnerability.
This vulnerability is being actively exploited.
For a complete description of the vulnerabilities and affected software, refer to Adobe Security Bulletins: APSA09-03.
AFFECTED SOFTWARE:
- Adobe Flash Player 10.0.22.87 and earlier 10.x versions
- Adobe Flash Player 9.0.159.0 and earlier 9.x versions
- Adobe Reader and Acrobat 9.1.2 and earlier 9.x versions
WHAT YOU NEED TO DO TO PROTECT YOUR SYSTEM:
1. Do NOT take action if you have a Computer Support Coordinator (CSC); they will apply the update for you or assist in instructing you.
2. If you do not have a CSC:
- Update your software
Refer to Adobe Security Bulletins: APSA09-03 on how to obtain the latest updates for your specific software.
- US-CERT and Adobe recommend the following to help mitigate this vulnerability:
- Disable JavaScript in Adobe Reader and Acrobat*
- Prevent Internet Explorer from automatically opening PDF documents*
- Disable the display of PDF documents in the web browser*
- Do not access PDF documents from untrusted sources
*Refer to US-CERT Cyber Security Alert SA09-161A for instructions.
ADDITIONAL INFORMATION:
- US-CERT Cyber Security Alert TA09-204A (Technical Alert)
If you have questions about any of the information provided above, you may send email inquiries to security@ucsf.edu.
Teresa A. Regalia, GCIH
UCSF Enterprise Information Security
Telephone: 415-502-1567
Teresa.Regalia@ucsf.edu
OAAIS Customer Support Service Desk
7 a.m. - 6 p.m., Mon – Fri
(415) 514-4100, Option 2
customersupport@ucsf.edu
help.ucsf.edu